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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1-16. (Cancelled) 

1 7. (Currently Amended) A file decryption apparatus that stor e s th e ciph e rt e xt and tho 

e ncrypt e d fil e k e y g e n e rat e d by th e fil e e ncryption apparatus of Claim 16, in association 
with e ach oth e r, in a m e mory unit th e reof, and decrypts a [the] ciphertext, the file 
decryption apparatus comprising: 

a k e y storag e m e dium storing k e y information b e for e hand; 

a memory unit for storing an encrypted key, a ciphertext, and an encrypted file key, the 
encrypted key being generated by encrypting key information stored in a portable 
key storage medium using a password, the encrypted file key being generated by 
encrypting a file key using the key information, and the ciphertext being 
generated by encrypting a plaintext using the file key; 

a switch unit switch m e ans 

(a) including a first key obtaining unit m e ans for r e c e iving operable to receive an 
input of a password and d e crypting decrypt the encrypted key stored in the 
memory unit using the received password to generate key information, and a 
second key obtaining unit m e ans for r e ading operable to read the key information 
from the key storage medium loaded in the file decryption apparatus , and 

(b) is operable to obtain obtaining the key information by one of the first key 
obtaining unit means and the second key obtaining unit m e ans ; and 

a decryption unit d e cryption m e ans for decrypting operable to decrypt t he encrypted file 
key using the obtained key information to generate a file key, and d e crypts 
decrypt the ciphertext using the file key to generate a decrypted text. 
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18-56. (Cancelled) 

57. (Currently Amended) The file decryption apparatus of Claim 17 5 wherein th e fil e 
e ncryption apparatus furth e r r e c e iv e s an input of a user id e ntifi e r that identifi e s a user, 
and writ e s th e us e r id e ntifi e r in association with th e e ncrypt e d k e y, to th e memory unit, 

ritt r\ 
uiiu 

the memory unit further stores, in association with the encrypted key, a user identifier 
that identifies a user, and 

the first key obtaining unit means further receives an input of the user identifier from the 
user and decrypts the encrypted key that is associated with the user identifier. 

58. (Currently Amended) The file decryption apparatus of Claim 17, wherein th e fil e 
e ncryption apparatus furth e r writ e s th e key information and/or authentication information 
in association with th e e ncrypt e d k e y, to th e m e mory unit, and furth e r writ e s th e 
e ncrypt e d k e y, th e key information, and/or auth e ntication information in association with 
th e ciph e rt e xt, to th e m e mory unit, 

the memory unit further stores, in association with the encrypted key, authentication 
information generated based on the key information, and 

the first key obtaining unit m e ans checks, using the authentication information, whether 
the encrypted key has been altered or not, when the encrypted key that is 
associated with the authentication information is decrypted, and th e d e cryption 
m e ans ch e cks, using th e auth e ntication information, wh e th e r th e ciph e rt e xt has 
b ee n alt e red or not, wh e n th e ciph e rt e xt that is associat e d with the auth e ntication 
information is d e crypt e d . 

59. (Currently Amended) The file decryption apparatus of Claim 17, wherein th e fil e 
e ncryption apparatus writ e s th e e ncrypt e d k e y to th e memory unit that is a portabl e 
storag e m e dium, and 

the memory unit is a portable storage medium, and 
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the first key obtaining unit m eans decrypts the encrypted key that has been written to the 
memory unit that is the portable storage medium. 

60. (Currently Amended) The file decryption apparatus of Claim 1 7, wherein th e fil e 
e ncryption apparatus furth e r writ e s th e encrypt e d k e y in association with th e ciph e rt e xt 
and th e e ncrypt e d fil e k e y, to th e m e mory unit, and 

the memory unit further stores the encrypted key in association with the ciphertext and 
the encrypted file key, and 

the first key obtaining unit m eans decrypts the encrypted key that is associated with the 
ciphertext and the encrypted file key. 

61. (New) The file decryption apparatus of Claim 17, wherein the memory unit further stores, 
in association with the ciphertext, authentication information generated based on the 
ciphertext, and the decryption unit checks, using the authentication information, whether 
the ciphertext has been altered or not, when the ciphertext that is associated with the 
authentication information is decrypted. 

62. (New) A file management apparatus that encrypts a plaintext to generate a ciphertext, 
stores the ciphertext* and decrypts the ciphertext, the file management apparatus 
comprising: 

a memory unit; 

a registration unit operable to receive an input of a password, generating an encrypted 
key by encrypting key information, which is stored in a portable key storage 
medium, using the received password, and writing the generated encrypted key to 
the memory unit; 

an encryption unit operable to generate a ciphertext by encrypting a plaintext using a file 
key, generate an encrypted file key by encrypting the file key using the key 
information stored in the key storage medium, and write the generated ciphertext 
and encrypted file key to the memory unit in association with each other; 
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a switch unit 

(a) including a first key obtaining unit operable to receive an input of the password and 

decrypt the encrypted key in the memory unit using the received password to 
generate key information, and a second key obtaining unit operable to read the 
key information from the key storage medium loaded in the file management 
apparatus, and 

(b) is operable to obtain the key information by one of the first key obtaining unit and the 

second key obtaining unit; and 

a decryption unit operable to decrypt the encrypted file key using the obtained key 

information to generate a file key, and decrypt the ciphertext using the file key to 
generate a decrypted text. 

63. (New) The file management apparatus of Claim 62, 

wherein the registration unit further receives an input of a user identifier that identifies a 
user, and writes the user identifier in association with the encrypted key, to the 
memory unit, and 

the first key obtaining unit further receives an input of the user identifier and decrypts the 
encrypted key that is associated with the user identifier. 

64. (New) The file management apparatus of Claim 62, 
wherein the registration unit further writes 

authentication information, which is generated based on the key information, to the 
memory unit in association with the encrypted key, 

the first key obtaining unit further checks, using the authentication information, whether 
the encrypted key has been altered or not, when the encrypted key that is 
associated with the authentication information is decrypted. 
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65. (New) The file management apparatus of Claim 62, 

wherein the encryption unit further writes authentication information, which is generated 
based on the ciphertext, to the memory unit in association with the ciphertext, 

the decryption unit further checks, using the authentication information, whether the 

ciphertext has been altered or not, when the ciphertext that is associated with the 
authentication information is decrypted. 



66. (New) The file management apparatus of Claim 62, 

wherein the memory unit is a portable storage medium, the registration unit writes the 
encrypted key to the memory unit being a portable storage medium, and 

the first key obtaining unit decrypts the encrypted key in the memory unit being a 
portable storage medium. 

67. (New) The file management apparatus of Claim 62 further comprising 

a deletion unit operable to delete the encrypted key that has been written to the memory 
unit. 

68. (New) The file management apparatus of Claim 62 further comprising 

a deletion unit operable to delete the encrypted key that has been written to the memory 
unit, 

wherein the registration unit further receives an input of a new password from the user, 

encrypts the key information using the new password to generate a new encrypted 
key, and writes the generated new encrypted key to the memory unit. 

69. (New) The file management apparatus of Claim 62, 

wherein the key storage medium stores new key information, instead of the key 
information, 

the registration unit receives the input of the password and decrypts the encrypted key 
using the password to generate key information, 

\ 
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the encryption unit decrypts the encrypted file key using the key information to generate 
a file key, encrypts the file key using the new key information to generate a new 
encrypted file key, and writes the new encrypted file key over the encrypted file 
key in the memory unit, and 

the registration unit encrypts the new key information using the password to generate a 
new encrypted key and writes the new encrypted key over the encrypted key in 
the memory unit. 

70. (New) The file management apparatus of Claim 69, 

wherein the registration unit further receives an input of a user identifier that identifies a 
user, 

the encryption unit further writes the user identifier in association with the ciphertext and 
the encrypted file key, to the memory unit, and 

the encryption unit retrieves the encrypted file key that is associated with the user 

identifier in the memory unit and generates a file key from the retrieved encrypted 
file key. 

71 . (New) The file management apparatus of Claim 69, 

wherein the encryption unit further writes encryption information in association with the 
ciphertext and the encrypted file key, to the memory unit, the encryption 
information indicating that the plaintext has been encrypted, and 

the encryption unit retrieves the encrypted file key that is associated with the encryption 
information in the memory unit, and generates a file key from the retrieved 
encrypted file key. 

72. (New) The file management apparatus of Claim 69, 

wherein the registration unit further receives an input of a user identifier that identifies a 
user, 
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the encryption unit further writes the user identifier in association with a file identifier 
that identifies the ciphertext and the encrypted file key, as a unified file, to the 
memory unit, and 

the encryption unit extracts the file identifier that is associated with the user identifier 
from the unified file, specifies the encrypted file key identified by the extracted 
file identifier, and generates a file key from the specified encrypted file key. 

73. (New) The file management apparatus of Claim 69, 

wherein the encryption unit further writes encryption information in association with a 
file identifier that identifies the ciphertext and the encrypted file key, as a unified 
file, to the memory unit, the encryption information indicating that the plaintext 
has been encrypted, and 

the encryption unit extracts the file identifier that is associated with the encryption 

information from the unified file specifies the encrypted file key identified by the 
extracted file identifier, and generates a file key from the specified encrypted file 
key. 



74. (New) The file management apparatus of Claim 62, 

wherein the encryption unit further writes the encrypted key in association with the 
ciphertext and the encrypted file key, to the memory unit, and 

the first key obtaining unit decrypts the encrypted key that is associated with the 
ciphertext and the encrypted file key. 

75. (New) The file management apparatus of Claim 74, 

wherein the encryption unit further receives an input of an indication, the indication 
showing whether the encrypted key and the ciphertext are to be written in 
association with each other to the memory unit, and writes, when the indication 
shows that the encrypted key and the ciphertext are to be written in association 
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with each other, the encrypted key in association with the ciphertext, to the 
memory unit. 

76. (New) The file management apparatus of Claim 74, 

wherein the registration unit writes the generated encrypted key to the key storage 
medium instead of to the memory unit. 
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